Behavioral task
behavioral1
Sample
0448bebe6cb4888a0ef3884b706a7c1a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0448bebe6cb4888a0ef3884b706a7c1a_JaffaCakes118
-
Size
61KB
-
MD5
0448bebe6cb4888a0ef3884b706a7c1a
-
SHA1
e140e46bb9108eae5ec6db00253bf099debc4ab2
-
SHA256
71788e4927b3b95120c8ea6eee22c00ca4b13cd06dca9156e2ceb7cf166b4103
-
SHA512
655b3484e34859e2fc4347b8b97adb551abb1f087c79b519d727a63f07d25c3048ec7171f863d1136f80a6dfc419f6202293d8055c1d5fce501d3ab72571a6f6
-
SSDEEP
1536:Iyz8hVbUVtvDoIyRXuEUVpHtpBiLI3f5aVeLL30LVuZ:daiL8te/9i0P5WeLLLZ
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0448bebe6cb4888a0ef3884b706a7c1a_JaffaCakes118
Files
-
0448bebe6cb4888a0ef3884b706a7c1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE